Call for evidence Proposed Standards 


default privacy settings; 

Default privacy settings should always be set at the highest level of restricted access for all 
the age groups. 

Restoring default settings with ease should be available for all age groups. 

Increased opportunity for sharing should be enabled for older ages groups- from known to 
user to public. 

Setting public privacy should always be accompanied by a confirmation setting and a clear 
statement of risk including copying and sharing 


- data minimisation standards; 
Higher for the youngest users 


- the presentation and language of terms and conditions and privacy notices; 
Needs to match the age of the user. 
Should be available to listen to, rather than read for 3-5 yo 


- uses of geolocation technology; 
Geolocation technology should not be accessible to users prior to the 13-15 age group 


- automated and semi-automated profiling; 
Unavailable until 11 yo 


- transparency of paid-for activity such as product placement and marketing; 
All paid-for activity should be transparent 


- the sharing and resale of data; 
Should not be available 


- the strategies used to encourage extended user engagement; 


- user reporting and resolution processes and systems; 
Easy to access and age appropriate. 
Service must be responsive 


- the ability to understand and activate a child's right to erasure, rectification and 
restriction; 
Has to be easy to access and activate 


- the ability to access advice from independent, specialist advocates on all data rights; and 
- any other aspect of design that the commissioner considers relevant. 
Via a standardised help button such as CEOP 


